Re: Deleting attributtes for Access-Accept

27 May 2016

      It's from my server, the problem is that i set a user with a sql_ippool and
when i put the user in another group, it add the attributte "Framed-Pool"
wich i want my NAS to use, but somewhere i read that NASes gives priority
to use the "Framed-IP-Address" before the "Framed-Pool" attributte.

I'm now trying the next statement under post-auth, but after a few tries i
couldn't find what is my error in the condition. when i achieve this i will
do regex, but for now im trying with String.

*Post-Auth section*

        if ( &Framed-Pool == "cortados" ) {
        }
        else {
        sqlippool
        }

*OUTPUT:*

*+- entering group post-auth {...}*
*Exec-Program output:
Mikrotik-Rate-Limit="1024/1024",Framed-Pool="cortados",*
*Exec-Program-Wait: value-pairs:
Mikrotik-Rate-Limit="1024/1024",Framed-Pool="cortados"*
*Exec-Program: returned: 0*
*++[exec] returns ok*
*++? if (&Framed-Pool == "cortados" )*
*? Evaluating (&Framed-Pool == "cortados" ) -> FALSE*
*++? if (&Framed-Pool == "cortados" ) -> FALSE*
*++- entering else else {...}*
*rlm_sql (sql): Reserving sql socket id: 3*

I think it should return a TRUE

 Best regards, Juanjo.

Sent with Stampery <https://stampery.com/gmail>

2016-05-23 21:54 GMT+02:00 <A.L.M.Buxey@lboro.ac.uk>:
...
Hi,
...
In my radius server (Ver. 2.2.0), i would like to delete one attributte
from the access-accept if a condition is met.
okay..so delete something from access-accept....access accept from your
server or from another server?
...
The condition would be: If the access-accept packet contains a
"Framed-IP-Address" and a "l" attributte, DELETE the "Framed-IP-Address".
I was trying to write into "Authorize" section the following statement:
authorize likely to be in wrong place -  post-auth or post-proxy likely to
be more suited
if (condition where framed-ip-address exists and other attribute has that
value in it) {
           update reply {
                Framed-IP-Address !* ANY
                }
        }
that !* blats values - you'll find it elsehwre in the native/default
coinfig and also in man pages for unlang etc.
alan
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
Sent with Stampery <https://stampery.com/gmail>

Re: Deleting attributtes for Access-Accept

Juanjo Abenza